CVE-2021-43970

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 1043 via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated low privileged attacker to execute remote code on the target server within the context of...

CVE-2021-43970: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability exists in albumimages.jsp in Quicklert for Digium 10.0.0 1043 via a .mp3;.jsp filename for a file that begins with audio data bytes. It allows an authenticated low privileged attacker to execute remote code on the target server within the context of...

PT-2022-11960

Name of the Vulnerable Software and Affected Versions Quicklert for Digium version 10.0.0 1043 Description An arbitrary file upload issue exists in the albumimages.jsp file, allowing an authenticated attacker with low privileges to execute remote code on the target server within the context of th...